Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kWxVLS7Fdm-9CdsPSu5U1m2qkiA.roa
File: kWxVLS7Fdm-9CdsPSu5U1m2qkiA.roa (raw, json)
Hash identifier: j8FbtuM/rflCDauC8p+j5EQC3jyLGrpwj3DML+/f5GU=
Subject key identifier: 91:6C:55:2D:2E:C5:76:6F:BD:09:DB:0F:4A:EE:54:D6:6D:AA:92:20
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0197C748BE0F4D63D319C4B6A82C3301C49D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kWxVLS7Fdm-9CdsPSu5U1m2qkiA.roa
Signing time: Tue 01 Jul 2025 18:38:42 +0000
ROA not before: Tue 01 Jul 2025 18:38:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:48:be:0f:4d:63:d3:19:c4:b6:a8:2c:33:01:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 1 18:38:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=916c552d2ec5766fbd09db0f4aee54d66daa9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:44:a8:a2:be:b5:3f:54:93:7f:e3:8b:06:
ba:0b:db:3b:93:54:d1:01:b5:e3:e9:b3:d1:ee:7b:
1e:ef:61:ec:ff:b1:2d:ae:c9:aa:2e:b6:ef:ab:3a:
70:1f:64:e5:a1:49:cc:32:ab:3d:38:e9:65:99:d0:
69:28:c9:d3:62:a2:3e:38:43:54:0a:a8:31:ff:91:
9e:fa:56:5e:34:df:3f:cc:97:14:d6:9f:71:5a:6f:
12:66:f4:96:6f:9c:77:5d:ab:a3:81:90:23:fe:88:
12:a5:53:03:2f:f2:14:c1:18:4f:2e:4d:ce:f2:4c:
76:ef:5e:e4:71:86:1f:39:b8:f6:2f:a0:c3:c7:6a:
0f:e4:9b:1e:a1:6e:82:54:79:2c:33:27:6e:c6:1b:
39:6b:4f:53:d0:85:a7:29:fa:a5:3e:1f:24:e0:c0:
35:49:73:d8:d3:5b:c6:fe:2b:0c:de:04:ce:53:5d:
89:fa:7a:05:fa:cc:31:c0:3c:d9:ac:e6:2f:a7:1a:
f3:d2:e2:40:6e:ef:35:e8:b2:bd:50:1d:11:5f:15:
fa:b1:10:d9:8b:6d:03:e8:64:e3:19:17:f8:bf:02:
29:61:b7:46:c4:ec:3a:f4:62:aa:2d:48:96:78:26:
34:28:79:51:5f:41:ee:06:18:f5:a7:99:c0:8a:3e:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:55:2D:2E:C5:76:6F:BD:09:DB:0F:4A:EE:54:D6:6D:AA:92:20
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kWxVLS7Fdm-9CdsPSu5U1m2qkiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:24:a3:34:7b:db:f4:f4:aa:fd:ec:54:f2:0b:ca:70:53:7e:
01:ae:fa:a8:9b:4f:4d:92:3d:67:63:8d:10:ae:91:23:15:c2:
bb:5b:53:e6:f6:a3:1a:f9:4b:c8:48:e3:79:32:db:ab:59:f8:
d1:4c:f6:e7:40:12:f4:18:b0:4f:b5:a1:a8:2e:34:79:34:c2:
26:5c:aa:e3:0a:61:c4:f1:f3:81:c8:31:23:0e:c7:44:8e:75:
7b:bb:84:69:35:a0:cc:a5:c2:6e:bf:47:d0:59:e1:c7:b6:95:
fd:6c:a6:39:1d:2a:a1:bb:13:04:e2:4c:e2:97:66:f3:08:a1:
5a:16:22:ae:ca:e6:12:79:11:ae:27:72:4a:ef:93:99:cf:4f:
86:2d:f8:15:34:74:d3:5b:5d:72:08:50:64:8e:19:4f:51:fe:
c8:ce:10:08:c8:67:6e:3e:6b:e5:05:44:f7:48:a3:32:17:90:
93:18:4b:76:ef:c2:cc:58:12:ee:ef:0b:f1:be:32:4c:78:b0:
b2:8e:16:f0:2a:e4:02:45:a9:fa:d2:1d:45:17:5f:36:49:03:
52:62:79:3a:bd:4a:d3:14:10:fd:fd:be:04:e7:df:1e:c8:8e:
72:82:b5:e8:e0:b5:b6:43:53:f9:eb:38:90:25:4c:63:5e:1a:
7d:51:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:23:49 2025 by rpki-client